Skip to end of metadata
Go to start of metadata

SSL Certificates from GoDaddy

Alerts

Protect your account with MFA, sign up now at go.lbl.gov/mfa

The following document outlines the process for acquiring an SSL certificate via the IT division for the lbl.gov domain with GoDaddy. It is preferred that SSL certificate requests go through the IT division, because coordination is needed between GoDaddy and the Lab's networking group, in order to process the request. GoDaddy is the typical vendor used by the IT division, although you are free to choose any vendor you prefer.

Step 1: SSL certificate approval 

Use the form below to notify the Lab's networking group to approve a new, renewal, or rekey an SSL certificate. Any request that causes GoDaddy to send an approval to the Lab's networking group requires a new entry in this form.  This allows the Lab's network group to prevent malicious SSL certificates from being issued.  SSL certificates will only be issued for static hostnames.  If you are adding a new hostname to an existing SAN/UCC certificate (not common), please submit the new hostname to this form.   The form requires a Lab login to submit.

Step 2: GoDaddy SSL certificates

If you are just rekeying an existing certificate, you can skip this step.

New SSL certificate 

  1. Create an account at GoDaddy

  2. Create a Berkeley Lab IT Help desk ticket at http://help.lbl.gov/

  3. The IT help desk ticket should include

    1. Support Type should be "Other", which is assigned to the category "Miscellaneous->Other".

    2. Include the following in "Please describe your issue below"

      1. short description such as "purchase GoDaddy SSL certificate credits"

      2. type of certificate to purchase (typically standard SSL, single domain, 2 years)

      3. GoDaddy account number to credit

      4. LBNL account number to charge

  4. The IT help desk ticket is assigned to the Lab site license group (SITELIC) to make the purchase

  5. The site license group will contact you for the password on your account, add credit, and close the ticket, which will send you a notification.

Renewal SSL certificate

  1. Create a Berkeley Lab IT Help desk ticket at http://help.lbl.gov/

  2. The IT help desk ticket should include

    1. short description "purchase GoDaddy SSL certificate renewal" 

    2. type of certificate to purchase (typically standard SSL, single domain, 2 years)

    3. GoDaddy account number to credit

    4. LBNL account number to charge

  3. The IT help desk ticket is assigned to the Lab site license group (SITELIC) to make the purchase

  4. The site license group will contact you for the password on your account, perform the renewal, and close the ticket, which will send you a notification.

Step 3: Submitting a CSR to GoDaddy

  1. Create a CSR and submit to GoDaddy.  In the GoDaddy Domain ownership selection, select both boxes as shown below. 

    (If the validation screen does not look like below, please send a screenshot to security@lbl.gov so we can update our graphic.)

  2. In the next 24-48 hours, GoDaddy will send a validation request email (to one of the above email address with "Domain Control Verification Is Required"), to be reviewed by the IT networking group. 

  3. The IT networking group approves the request only if it is listed in the following spreadsheet (created from the form filled out in Step 1) 

  4. GoDaddy issues the certificate

Recent Requests

Recent requests can be seen in the following spreadsheet.  Only the IT networking group can update this spreadsheet.